topic Re: Export Management Permitted IP Access List in Next-Generation Firewall Discussions

Export Management Permitted IP Access List

NelsonE3 — Wed, 15 Feb 2023 04:39:13 GMT

I have been looking through posts but cannot seem to find what I am looking for.

There are some Management Interface Permitted IPs on our Firewalls that do not match the Template that we have for them in Panorama. Is there a CLI command where I can export the Permitted IP list for a firewalls' Management access? From the GUI there doesn't seem to be an export function either.

I just need to compare what is on the Firewalls vs. what is listed in Panorama as it would appear people have overwritten the template.

Re: Export Management Permitted IP Access List

TomYoung — Wed, 22 Feb 2023 02:12:49 GMT

Hi @NelsonE3 ,

By default the Management Interface Settings DO override what is sent by Panorama. You should see the orange gear on top of the green one to indicate override. Mousing over the gear will also confirm.

You can run these commands from the CLI to see what is configured locally:

> set cli config-output-format set
> configure

# show deviceconfig system permitted-ip

The Panorama pushed config will NOT show there. If you delete the local configuration, the Panorama configuration should then show up.

Thanks,

Tom